---
typeId: req
recordId: benac-enc-009
fields:
  title: Private keys not package-readable
  statement: Benac shall keep private keys, long-term principal keys, raw secret
    material, and default content-encryption keys out of package-readable data.
  rationale: Package compromise must not automatically compromise identity or all
    encrypted data.
  verification: WASM package cannot read private keys or raw content keys through
    host interface.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 63
---
